GET POST Security
Posted 12 May 2006 - 07:34 PM
I'm trying to make one of my programs more secure, and I'd like to keep all GET and POST statements out of the URL. I'm pretty sure I have to tweak one of the php_ini settings, but I can't figure out which one. Anybody know how i can do this?
Posted 12 May 2006 - 07:36 PM
Posted 15 May 2006 - 07:18 PM
Posted 15 May 2006 - 07:51 PM
I don't believe that there is any way around this.
Posted 15 May 2006 - 09:11 PM
Posted 15 May 2006 - 09:51 PM
Posted 15 May 2006 - 11:03 PM
Posted 16 May 2006 - 01:13 AM
Posted 16 May 2006 - 01:21 AM
i guess it depends on what you are trying to prevent the user from doing when (s)he keeps clicking back and resubmitting. For instance, to prevent spamming, most message boards have a flood control option that basically keeps track of the last time someone posted and if they try to submit another post in (example) less than 30 seconds, it will not accept it (as in, not update relavent info into the database).
or i guess you could do an IP check, for random surfers. keep a log of IPs and timestamp of when info was submitted and then do a check on submit to see if the IP address was logged x amount of time earlier...
also you could check to see if the cookie already exists.
Please, take the time and do some research and find out how much it would have cost you to get your help from a decent paid-for source. A "roll-of-the-dice" freelancer will charge you $5-$15/hr. A decent entry level freelancer will charge you around $15-30/hr. A professional will charge you anywhere from $50-$100/hr. An agency will charge anywhere from $100-$250/hr. Think about all this when soliciting for help here. Think about how much money you are making from the work you are asking for help on. No, we do not expect you to pay for the help given here, but donating a few bucks is a fraction of the cost of what you would have paid, shows your appreciation, helps motivate people to keep offering help without the pricetag, and helps make this a higher quality free-help community
0 user(s) are reading this topic
0 members, 0 guests, 0 anonymous users